Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
File:                     c0540611-3f02-385f-ae3f-b838ce9aef5d.roa (raw, json)
Hash identifier:          44oXV/wYiQ6WuToNmswe+X66OB0opeQ5i+MbhVT1QGk=
Subject key identifier:   2A:45:95:A2:1B:6C:53:B6:C8:80:0B:FD:1D:7D:18:8A:50:51:FB:01
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E9EAFE99EE22DEE7CB5B8FE80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        198.187.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e9:9e:e2:2d:ee:7c:b5:b8:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=bf8fddc7-1e8d-4cb3-b587-7665cd64efc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:e8:32:23:9a:9e:6c:9b:d0:63:b8:45:34:
                    14:ab:31:15:20:8b:91:48:38:45:3f:bb:a4:f5:2c:
                    e4:45:18:42:cb:fe:eb:eb:20:e1:6f:95:9a:7b:e0:
                    0b:d8:d3:8a:39:5d:8a:8e:e5:df:35:78:9f:57:d7:
                    3d:e2:e5:d8:f1:29:3d:c0:cf:26:9b:8d:63:3a:39:
                    44:a9:06:d4:72:c3:56:fd:c8:2f:48:32:e2:77:ab:
                    6a:f8:f9:4a:74:97:79:aa:da:f5:e7:16:cd:66:44:
                    00:ca:cf:41:ea:54:33:1d:b3:c0:65:62:d8:d5:8f:
                    e2:3d:14:e3:6d:6c:3a:61:be:3a:4a:e1:1a:5c:27:
                    c5:bd:43:3b:9b:56:0a:4c:ee:4b:1c:84:8a:38:36:
                    f8:dd:35:45:03:53:9a:76:41:9b:d6:c0:89:0d:fc:
                    6d:a6:e6:6d:c0:14:56:b9:d7:c5:b0:a9:f6:56:52:
                    f5:fb:26:3f:13:28:89:12:f4:c4:72:43:bd:b1:8a:
                    85:25:d8:3e:8e:25:de:9e:8a:95:7f:d6:40:c3:6e:
                    5d:f9:22:66:a1:0b:bc:f9:a6:82:34:2b:1d:e6:2c:
                    47:0b:5a:95:8d:a0:67:4e:73:44:5e:83:77:85:df:
                    36:65:53:2b:52:96:a7:ce:65:b3:80:ed:b5:e5:48:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:45:95:A2:1B:6C:53:B6:C8:80:0B:FD:1D:7D:18:8A:50:51:FB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:0f:19:eb:7a:f2:1c:91:bd:3f:a3:68:4c:d2:19:7d:e4:
         5a:1c:ee:66:de:02:4a:2a:81:0a:55:de:68:7b:10:7f:15:ee:
         f8:4a:a1:cb:ce:68:d8:20:ed:ad:a4:3a:d8:fb:31:ea:18:b5:
         90:28:26:42:ba:2f:cb:80:f6:81:b6:17:fd:ac:8c:72:c4:04:
         d8:05:ba:ef:8b:a4:fb:05:52:a6:35:f8:ae:75:c5:fa:ef:88:
         3f:da:70:18:12:6f:e4:11:fd:35:45:b9:11:46:86:ab:be:5a:
         3c:72:8d:cb:65:71:8e:6d:88:9a:0a:90:68:b0:7e:79:62:c2:
         6a:5a:c7:b9:bf:04:79:04:78:4d:60:0e:d8:b3:d1:ab:2f:51:
         32:88:c8:09:53:3d:0d:53:ed:7b:61:99:51:8c:70:58:87:37:
         0f:66:4f:a8:bd:ab:ce:21:e9:ca:09:49:23:5d:e8:c3:56:e9:
         3f:05:89:6c:aa:c5:a7:3d:30:84:0a:06:4a:32:8d:2d:72:d9:
         f5:62:58:07:ea:eb:d5:b4:e6:95:13:15:f3:a2:33:50:06:8b:
         a6:72:50:0d:f9:ba:8e:ea:70:eb:bd:40:3d:81:92:a2:6f:02:
         3f:d4:ca:a3:9f:2c:92:b9:ac:a6:51:35:81:66:51:f0:62:e7:
         36:ea:e6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:59 2026 by rpki-client